Maintainability pass: correctness fixes, dedup, sealed start* ceremony, docs#59

Merged

wolpert merged 12 commits into

mainfrom

maintainability-pass

Jun 12, 2026

Commits on Jun 12, 2026

fix(dynamodb): only treat freshness-condition failures as race-lost rotation

wolpert
and
claude
committed
fix(otp): drop misleading constant-time self-compare on no-active-OTP branch

wolpert
and
claude
committed
ci: drop residual SonarQube scan and guard against skipped integration tests

wolpert
and
claude
committed
docs: fix drift and close security-facing documentation gaps

wolpert
and
claude
committed
feat(otp,backup-codes,magic-link): validate Config record ranges

wolpert
and
claude
committed
refactor(admin): replace SendResult downcast with exhaustive sealed switch

wolpert
and
claude
committed
refactor(core,adapters): centralize the persistence-failure response envelope

wolpert
and
claude
committed
refactor(core,adapters): centralize relying-party and ceremony config translation

wolpert
and
claude
committed
feat(core,adapters)!: model start* ceremony rate-limiting as a sealed result

wolpert
and
claude
committed
test(persistence): cover concurrent consume-once for OTP and backup codes

wolpert
and
claude
committed
docs(spi): backfill contract Javadoc and @since on required and optional SPIs

wolpert
and
claude
committed
ci: restore the SonarQube scan for the browser SDK (JavaScript only)

wolpert
and
claude
committed